D-Link DFL-260E User Manual for DFL-260E - Page 205
Debug, Authentication, Private Router ID, Reference Bandwidth, RFC 1583 Compatibility, Medium
View all D-Link DFL-260E manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 205 highlights
4.5.3. OSPF Components Chapter 4. Routing Private Router ID Reference Bandwidth RFC 1583 Compatibility This is used in an HA cluster and is the ID for this firewall and not the cluster. Note When running OSPF on a HA Cluster there is a need for a private master and private slave Router ID as well as the shared Router ID. Set the reference bandwidth that is used when calculating the default interface cost for routes. If bandwidth is used instead of specifying a metric on an OSPF Interface, the cost is calculated using the following formula: cost = reference bandwidth / bandwidth Enable this if the NetDefend Firewall will be used in a environment that consists of routers that only support RFC 1583. Debug Protocol debug provides a troubleshooting tool by logging OSPF protocol specific information to the log. • Off - Nothing is logged. • Low - Logs all actions. • Medium - Logs all actions that Low logs but with more detail. • High - Logs everything with most detail. Note When using the High setting, the firewall will log a lot of information, even when just connected to a small AS. Changing the advanced setting Log Send Per Sec Limit may be required. Authentication OSPF supports the following authentication options: No (null) authentication Passphrase MD5 Digest No authentication is used for OSPF protocol exchanges. A simple password is used to authenticate all the OSPF protocol exchanges. MD5 authentication consists of a key ID and 128-bit key. When MD5 digest is used the specified key is used to produce the 128-bit MD5 digest. This does NOT mean that the OSPF packets are encrypted. If the OSPF traffic needs to be encrypted then they must be sent using a VPN. For example, using IPsec. Sending OSPF packets through an IPsec tunnel is discussed further in 205